The Tiempo.com WordPress plugin... CVE-2023-0058
-
AV
AC
AU
C
I
A
发布：
2023-08-16
修订：
2023-11-07
The Tiempo.com WordPress plugin through 0.1.2 does not have CSRF check when creating and editing its shortcode, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有1条受影响产品信息
